?
Solved

What's the difference between Domain Controller Security Settings and Domain Security Settings?

Posted on 2007-12-04
6
Medium Priority
?
1,957 Views
Last Modified: 2012-06-27
What's the difference between Domain Controller Security Settings and Domain Security Settings?
0
Comment
Question by:AnimatorOne
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 12

Accepted Solution

by:
bhnmi earned 1200 total points
ID: 20406816
One is for the Domain Controllers and the other is domain wide.
0
 
LVL 38

Assisted Solution

by:Shift-3
Shift-3 earned 800 total points
ID: 20406851
Domain Security Settings affect every computer in the domain.  Domain Controller Security Settings only affect machines in the Domain Controllers OU.

Keep in mind that Account Policies (password, lockout, and kerberos settings) must be set at the domain level.  They have no effect if set on a site or OU.

Group Policy is a big and complicated topic.  Here is an introduction:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 20406867
I am not sure where you see the two, meaning Domain Security and Domain Controller Security, to draft this question? But, it sounds like you are trying to figure out the Domain controller's settings in comparison to the Default Domain Group policy settings.

The domain controller's settings should be one domain controller, when the domain security settings will interact with all domain controllers and clients on your domain.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 39

Expert Comment

by:ChiefIT
ID: 20406871
Looks like we were all drafting the answer at the same time. Sorry about the redundancy.
0
 

Author Comment

by:AnimatorOne
ID: 20406877
So if you set a DC Permision, it will replicate to other DCs only and if you set the Domain permission it goes out to every PC, Server etc on the domain?
0
 

Author Closing Comment

by:AnimatorOne
ID: 31412695
Thank you!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question